SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint d5c47a1a88811a5af0fe23f339a5e1aecbff1396.
Database Entry
| SHA1 Fingerprint: | d5c47a1a88811a5af0fe23f339a5e1aecbff1396 |
|---|---|
| Certificate Common Name (CN): | interconstructionsite.pro |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2025-06-03 01:19:38 UTC |
| Last seen: | 2025-06-03 20:35:59 UTC |
| Status: | Blacklisted |
| Listing reason: | LummaStealer C&C |
| Listing date: | 2025-06-03 05:30:21 |
| Malware samples: | 5 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2025-06-03 20:35:59 | 205d240a1695a905e259afa4daca3636 | n/a | 104.21.29.234:443 | |
| 2025-06-03 17:30:31 | e9c70a88ce89558a4e42386b20c8c1f6 | n/a | 172.67.149.248:443 | |
| 2025-06-03 11:13:23 | 916eec4e23123e3a1d63ea2daf0c2c14 | n/a | 172.67.149.248:443 | |
| 2025-06-03 07:13:43 | d52532ecc821a289f4556c1242bea587 | n/a | 104.21.29.234:443 | |
| 2025-06-03 01:19:38 | 2f4284ce01223c4b40bbeed1be3aca56 | n/a | 104.21.29.234:443 | |
| 2025-06-03 01:19:38 | 2f4284ce01223c4b40bbeed1be3aca56 | n/a | 104.21.29.234:443 |
# of entries: 6 (max: 100)